[security bulletin] HPSBMU02996 rev.1 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access, Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04026039 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04026039 Version: 1 HPSBMU02996 rev....

CVE-2013-6218

Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-6218

HP Network Node Manager I (NNMi) versions 9.0X, 9.1X, and 9.2X are affected by CVE-2013-6218. The security bulletin notes remote unauthorized access and arbitrary code execution via unknown vectors, with a CVSS v2 base score of 10.0. HP provides hotfixes to address the vulnerability for NNMi 9.0X...

HP Network Node Manager i (NNMi) Console Detection

The remote host is running the Network Node Manager i NNMi console, a web interface for managing NNMi. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70146; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

HPE Network Node Manager i (NNMi) Detection (credentialed check)

HPE Network Node Manager i NNMi is installed on the remote Windows host. NNMi is a component of HPE Automated Network Management Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70145; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2013-2351

HP NNMi (HP Network Node Manager i) versions 9.00, 9.1X, and 9.2X are affected by CVE-2013-2351. The ZDI advisory describes a flaw in pmd.exe that listens on TCP port 162; a specially crafted packet can cause a heap corruption and remote code execution without authentication. HP/SSRT bulletin SSR...

[security bulletin] HPSBMU02842 SSRT100909 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03652323 Version: 1 HPSBMU02842 SSRT100909 rev.1 - HP Network Node Manager i NNMi for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security...

CVE-2012-3279

HP NNMi affects NNMi v8.x and v9.0x/v9.1x/v9.20 across HP-UX, Linux, Solaris and Windows. The flaw is remote XSS via unspecified vectors allowing injection of arbitrary web script/HTML; CVSS 2.0 base 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N). Remediation per HP security bulletin: upgrade to v9.0x/v9.1x/v...

HP-UX PHSS_42793 : HP-UX 11.31 OV NNM9.20 NNM 9.2x Patch 1

HP-UX 11.31 OV NNM9.20 NNM 9.2x Patch 1 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP Network Node Manager i NNMi for HP-UX, Linux, Solaris, and Windows. The vulnerability could be remotely exploited resulting in...

CVE-2012-3275

Unspecified vulnerability in HP Network Node Manager i NNMi 9.1x and 9.20 allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in HP Network Node Manager i NNMi 9.1x and 9.20 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2012-3267

Unspecified vulnerability in HP Network Node Manager i NNMi 9.20 allows remote attackers to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Network Node Manager i NNMi 9.20 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-3267

Unspecified vulnerability in HP Network Node Manager i NNMi 9.20 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-2022

HP NNMi (Network Node Manager i) vulnerable to remote cross-site scripting (XSS) in NNMi 8.x and 9.x (9.0x, 9.1x, 9.20). The CVE-2012-2022 entry documents unspecified vectors that could allow an attacker to inject web script or HTML via the NNMi web interface. The security bulletin notes the vuln...

[security bulletin] HPSBMU02783 SSRT100806 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03343724 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03343724 Version: 1 HPSBMU02783...

CVE-2012-2018

HP NNMi is vulnerable to a remote Cross-Site Scripting (XSS) in NNMi versions 8.x, 9.0x and 9.1x, allowing injection of arbitrary scripts via unspecified vectors. The CVSS v2.0 base score is 4.3 (MEDIUM) with Network attack vector, no authentication required, but with partial integrity impact. HP...

HP-UX PHSS_41983 : HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access (HPSBMA02659 SSRT100440 rev.2)

s700800 11.X OV NNM9.10 NNM 9.1x Patch 1 : A potential vulnerability has been identified with HP Network Node Manager i NNMi for HP-UX, Linux, Solaris, and Windows. The vulnerability could be remotely exploited resulting in unauthorized access to NNMi processes. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHSS_42328 : s700_800 11.X OV NNM9.00 NNM 9.0x Patch 5

s700800 11.X OV NNM9.00 NNM 9.0x Patch 5 : The remote HP-UX host is affected by multiple vulnerabilities : - Apotential security vulnerability has been identified with HP Network Node Manager I NNMi on HP-UX, Linux, Solaris, and Windows. The vulnerability could be remotely exploited resulting in...